{"id":3474,"date":"2021-11-17T16:36:45","date_gmt":"2021-11-17T08:36:45","guid":{"rendered":"https:\/\/blog.spotodumps.com\/?p=3474"},"modified":"2021-11-17T16:36:45","modified_gmt":"2021-11-17T08:36:45","slug":"2021-updated-isaca-crisc-practice-test-15-questions","status":"publish","type":"post","link":"https:\/\/blog.spotodumps.com\/index.php\/2021\/11\/17\/2021-updated-isaca-crisc-practice-test-15-questions\/","title":{"rendered":"2021 Updated ISACA CRISC Practice Test (15 Questions)"},"content":{"rendered":"

Certified in Risk and Information Systems Control<\/a>, or CRISC for short, is a well-known qualification in the field of information technology. ISACA offers this certification to confirm a person’s abilities and expertise in recognizing, analyzing, managing, and decreasing various risks. It adequately prepares the employee for interactions with the organization’s regulators, stakeholders, or peers. The certification holder may effectively engage in the company’s risk management and provide the right solution for information security control thanks to his or her knowledge.<\/p>\n

\"get<\/a><\/p>\n

Question 1<\/strong>
\nWhich of the following is the BEST way to ensure that outsourced service providers comply with the enterprise’s information security policy?
\nA. Penetration testing
\nB. Service level monitoring
\nC. Security awareness training
\nD. Periodic audits<\/p>\n

Answer :<\/strong> D<\/p>\n

Question 2<\/strong>
\nYou are the project manager of RFT project. You have identified a risk that the enterprise’s IT system and application landscape is so complex that, within a few years, extending capacity will become difficult and maintaining software will become very expensive. To overcome this risk, the response adopted is re- architecture of the existing system and purchase of new integrated system. In which of the following risk prioritization options would this case be categorized?
\nA. Deferrals
\nB. Quick win
\nC. Business case to be made
\nD. Contagious risk<\/p>\n

Answer :<\/strong> C<\/p>\n

Question 3<\/strong>
\nWhich of the following BEST ensures that a firewall is configured in compliance with an enterprise’s security policy?
\nA. Interview the firewall administrator.
\nB. Review the actual procedures.
\nC. Review the device’s log file for recent attacks.
\nD. Review the parameter settings.<\/p>\n

Answer :<\/strong> D<\/p>\n

Question 4<\/strong>
\nWhich of following is NOT used for measurement of Critical Success Factors of the project?
\nA. Productivity
\nB. Quality
\nC. Quantity
\nD. Customer service<\/p>\n

Answer :<\/strong> C<\/p>\n

Question 5<\/strong>
\nWhich of the following statements is NOT true regarding the risk management plan?
\nA. The risk management plan is an output of the Plan Risk Management process.
\nB. The risk management plan is an input to all the remaining risk-planning processes.
\nC. The risk management plan includes a description of the risk responses and triggers.
\nD. The risk management plan includes thresholds, scoring and interpretation methods, responsible parties, and budgets.<\/p>\n

Answer :<\/strong> C<\/p>\n

\"get<\/a><\/p>\n

Question 6<\/strong>
\nYou are the project manager of a project in Bluewell Inc. You and your project team have identified several project risks, completed risk analysis, and are planning to apply most appropriate risk responses. Which of the following tools would you use to choose the appropriate risk response?
\nA. Project network diagrams
\nB. Cause-and-effect analysis
\nC. Decision tree analysis
\nD. Delphi Technique<\/p>\n

Answer :<\/strong> C<\/p>\n

Question 7<\/strong>
\nYou are the risk official of your enterprise. Your enterprise takes important decisions without considering risk credential information and is also unaware of external requirements for risk management and integration with enterprise risk management. In which of the following risk management capability maturity levels does your enterprise exists?
\nA. Level 1
\nB. Level 0
\nC. Level 5
\nD. Level 4<\/p>\n

Answer :<\/strong> B<\/p>\n

Question 8<\/strong>
\nWhich of the following is the priority of data owners when establishing risk mitigation method?
\nA. User entitlement changes
\nB. Platform security
\nC. Intrusion detection
\nD. Antivirus controls<\/p>\n

Answer :<\/strong> A<\/p>\n

Question 9<\/strong>
\nWhat type of policy would an organization use to forbid its employees from using organizational e-mail for personal use?
\nA. Anti-harassment policy
\nB. Acceptable use policy
\nC. Intellectual property policy
\nD. Privacy policy<\/p>\n

Answer :<\/strong> B<\/p>\n

Question 10<\/strong>
\nWendy has identified a risk event in her project that has an impact of $75,000 and a 60 percent chance of happening. Through research, her project team learns that the risk impact can actually be reduced to just $15,000 with only a ten percent chance of occurring. The proposed solution will cost $25,000. Wendy agrees to the $25,000 solution. What type of risk response is this?
\nA. Mitigation
\nB. Avoidance
\nC. Transference
\nD. Enhancing<\/p>\n

Answer :<\/strong> A<\/p>\n

Question 11<\/strong>
\nWhich of the following processes addresses the risks by their priorities, schedules the project management plan as required, and inserts resources and activities into the budget?
\nA. Monitor and Control Risk
\nB. Plan risk response
\nC. Identify Risks
\nD. Qualitative Risk Analysis<\/p>\n

Answer :<\/strong> B<\/p>\n

Question 12<\/strong>
\nOut of several risk responses, which of the following risk responses is used for negative risk events?
\nA. Share
\nB. Enhance
\nC. Exploit
\nD. Accept<\/p>\n

Answer :<\/strong> D<\/p>\n

Question 13<\/strong>
\nWhich of the following risks refer to probability that an actual return on an investment will be lower than the investor’s expectations?
\nA. Integrity risk
\nB. Project ownership risk
\nC. Relevance risk
\nD. Expense risk<\/p>\n

Answer :<\/strong> D<\/p>\n

Question 14<\/strong>
\nWhat are the PRIMARY requirements for developing risk scenarios?
\nEach correct answer represents a part of the solution. Choose two.
\nA. Potential threats and vulnerabilities that could lead to loss events
\nB. Determination of the value of an asset at risk
\nC. Determination of actors that has potential to generate risk
\nD. Determination of threat type<\/p>\n

Answer :<\/strong> AB<\/p>\n

Question 15<\/strong>
\nWhat are the responsibilities of the CRO?
\nEach correct answer represents a complete solution. Choose three.
\nA. Managing the risk assessment process
\nB. Implement corrective actions
\nC. Advising Board of Directors
\nD. Managing the supporting risk management function<\/p>\n

Answer :<\/strong> ABD<\/p>\n

More Exam Dumps that Guarantees 100% Pass Your Real Exam Questions!<\/p>\n

\"get<\/a><\/p><\/blockquote>\n

Latest SPOTO Candidates Pass Feedback<\/strong><\/h2>\n